Linux (MDK 10.0) Encryption Recommendations Please

[mkool]

Ok, my basics:
- Running Mandrake 10.0 Official
- kernel 2.6.3-7mdk-i686-up-4GB

I recently moved from Windows XP - > Fedora 2 -> Mandrake 10.0. Fedora Core 2 was unstable for me using nautilus and had a bunch of other issues i didn't care for.... including the 4K stack problem. In Windows XP, I used DriveCrypt Plus Pack to encrypt two partitions on my secondary hard drive with a 2 pass-phrase combination. Every time I booted, I could open the login prompt for drivecrypt and it would decrypt my partitions for me. It was seamless to windows and both partitions could be used like normal without any special hassle.

I am looking for a solution for linux that will allow me to encrypt entire partitions with a strong, unbroken cipher. I would like the solution to be tested, stable, and require minimal kernel patching / recompiling because I am not that experienced with linux. Preferably, this solution would be transparent to the linux once loaded. I AM ABLE to wipe the partition and start afresh, so there is no need for techniques that can encrypt a partition already filled with data - altough it would be a plus..


Please help! I am currently not looking for expensive commercial solutions.

*note* I heard the 2.6 kernel may have built-in encryption, does anyone know anything about this?

 

[eigen]

loop-aes is the way to go sir. Check out their site on sourceforge. With loop-aes you can actually do better than just encrpyt a few select partions. You can encrypt /. You will wind up with a totally encypted root partion with a small unencypted partion from which you boot.


There is also a product called bestcrypt which I could never get working (under RH9, slackware 10, or Federa 1/2). It is free for linux.

As far as crypto being built into the kernel , that is true and loop-aes takes adavantage of this .
To see the crypto options availble under 2.6 do:
cd /usr/src/linux
make menuconfig
Crypto


There is a good how-to on one of the gentoo forums. search (loop-aes howto). I am currently trying to adapt this how-to for Fedora Core 2. PM me if need be , or maybe I could pm you if you get it working


Also check out munitions for other soultions.

Oh another cool thing about this method is that you can also encypt your swapspace. I am not sure you much you know bout crypto but this is a very good thing. Actually very very good.

 

[mkool]

thanks for the suggestions, i think i might try the bestcrypt package after i backup all of my data! i'll let you know how it goes: i may also try the built-in / loop-aes approach.